# Why does Kibana log says “Checking Elasticsearch version” error?

**URL:** <https://forum.opensearch.org/t/why-does-kibana-log-says-checking-elasticsearch-version-error/2135>\
**Category:** Security\
**Created:** [January 27, 2020, 3:04pm UTC](https://forum.opensearch.org/t/why-does-kibana-log-says-checking-elasticsearch-version-error/2135 "2020-01-27T15:04:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![manz](https://avatars.discourse-cdn.com/v4/letter/m/f05b48/32.png) [@manz](https://forum.opensearch.org/u/manz)\
**Post date:** [January 27, 2020, 3:04pm UTC](https://forum.opensearch.org/t/why-does-kibana-log-says-checking-elasticsearch-version-error/2135/1 "2020-01-27T15:04:56Z")

</div>

Hi Guys,

I am trying to integrate openid with opendistro for my enterprise SSO.

here is the configuration details:  
Elasticsearch version- 7.3.2  
Kibana version-7.3.2

and i have installed security version 1.3.0.

seems like my elasticsearch cluster is running without any errors. but my kibana cluster pops me into error like “ **Checking Elasticsearch version** ” continuously.

and configured logging.verbose to TRUE to get cause of the error. but no luck.

does anyone have any idea on this what’s going on here?. Thanks in Advance!

---

<div class="post-metadata">

**Author:** ![manz](https://avatars.discourse-cdn.com/v4/letter/m/f05b48/32.png) [@manz](https://forum.opensearch.org/u/manz)\
**Post date:** [January 27, 2020, 3:25pm UTC](https://forum.opensearch.org/t/why-does-kibana-log-says-checking-elasticsearch-version-error/2135/2 "2020-01-27T15:25:14Z")

</div>

i have found some suggestions from this thread [Troubleshooting Security Plugin Issues](https://forum.opensearch.org/t/troubleshooting-security-plugin-issues/1234)

but it also didn’t help me much. moreover i’m not using any keycloak IDP for the setup.

can some one please get me out of this weird error?

---

<div class="post-metadata">

**Author:** ![manz](https://avatars.discourse-cdn.com/v4/letter/m/f05b48/32.png) [@manz](https://forum.opensearch.org/u/manz)\
**Post date:** [January 28, 2020, 9:04am UTC](https://forum.opensearch.org/t/why-does-kibana-log-says-checking-elasticsearch-version-error/2135/3 "2020-01-28T09:04:00Z")

</div>

i found that some parameter is missing in openid configuration document information.

> <https://github.com/opensearch-project/documentation-website/issues/96>
>
> There is a quite well documented configuration settings for OpenID: https://open…distro.github.io/for-elasticsearch-docs/docs/security-configuration/openid-connect/ but it clearly misses the information that for openid the \`openid\_connect\_idp\` prefix is required:
> https://github.com/opendistro-for-elasticsearch/security-advanced-modules/blob/e5d91955087c7365ac9a9ff33368521761976ee6/src/main/java/com/amazon/dlic/auth/http/jwt/keybyoidc/HTTPJwtKeyByOpenIdConnectAuthenticator.java#L57
> 
> So this is how it should be configured:
> \`\`\`
> openid\_auth\_domain:
> http\_enabled: true
> transport\_enabled: true
> order: 1
> http\_authenticator:
> type: openid
> challenge: false
> config:
> subject\_key: preferred\_username
> roles\_key: roles
> openid\_connect\_idp:
> enable\_ssl: true
> verify\_hostnames: false
> \`\`\`
> 
> instead of:
> 
> \`\`\`
> openid\_auth\_domain:
> http\_enabled: true
> transport\_enabled: true
> order: 1
> http\_authenticator:
> type: openid
> challenge: false
> config:
> enable\_ssl: true
> verify\_hostnames: false
> subject\_key: preferred\_username
> roles\_key: roles
> \`\`\`

I did setup that `openid_connect_idp ` prefix in my configuration. But still it didn’t work for me.

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [April 19, 2021, 11:52am UTC](https://forum.opensearch.org/t/why-does-kibana-log-says-checking-elasticsearch-version-error/2135/4 "2021-04-19T11:52:42Z")

</div>

@manz I had my odfe 1.3.0 running with openid authentication and had no issues with starting Kibana. Currently, I’m on a newer odfe version. Both were running with keyckloak. Do you still have this issue?  
If so could you share your configs and what IDP do you use?